HNHacker News
TopNewBestAskShowJobs

thatrascaltiger

10 karma · joined July 14, 2016

submissionscomments
thatrascaltiger··on Azure and AWS's 'GPU general availability' lies
Exactly which cryptocurrency is actually feasible to GPU mine? Bitcoin hasn't been feasible to GPU mine for years.
thatrascaltiger··on MacBook Pro
Now might be a good time to rebind Caps-Lock to Esc.
thatrascaltiger··on The forgotten underground world of Swiss bunkers
John McPhee's book "La Place de la Concorde Suisse" covers the history and culture of the Swiss army, and spends a bit of time talking about the bunkers in Switzerland, including the secrecy around them. Worth a read if this stuff interests.
thatrascaltiger··on Ask HN: How do you handle DDoS attacks?
* Don't buy service from a single CDN. It's a recipe for disaster because even Akamai have outages, and having a traffic management setup that lets you move partial/entire traffic to a different CDN will let you not only mitigate their outages, but also move traffic to a cheaper/better provider.

* If you can't CDN all your traffic, a CNAME with low TTL that can quickly switch to a CDN/WAF endpoint can be helpful.

* AWS, Azure and GCP all have mitigations for L3 attacks built into their infrastructure. Because you don't know how they operate, or when, don't rely on them. Accept they may break your service and be prepared to have downtime or the means to shift your product quickly if an attack is big enough or presses enough secret buttons.

* Identify and remove all potential means of amplification both at networking/infra and application. This means not exposing your own nameservers or NTP servers publicly, for L7 this is more complicated as it'll depend on how your APIs and products interact with themselves and each other.

* Load test your products often to know what breaking point is and when performance regressions arise with a given amount of resources allocated. Fixing these early may mean you can ride out a DDoS without needing to do anything if it's small enough and your application efficient enough.

thatrascaltiger··on Moving 12 years of email from GMail to FastMail
> Gmail only does "plus" aliasing, but that's obvious and problematic

When using Gmail with Google Apps you can set up wildcarding, I have it setup so I can put anything I like before the at symbol and it all funnels into my inbox, no plus required. I use this typically to set the email address used with a given company to their name @ my domain.

thatrascaltiger··on Biscuit: a multi-region key value store for your AWS infrastructure secrets
It does - https://github.com/mozilla/sops/blob/master/sops/__init__.py...
thatrascaltiger··on Biscuit: a multi-region key value store for your AWS infrastructure secrets
It looks like this is fairly similar to Mozilla sops[1].

[1]https://github.com/mozilla/sops